Home / Data & security
Data & sovereignty
Where your customers'
conversations actually go
Call recordings are among the most sensitive data a business holds. This page answers the questions your IT and compliance people will ask — including the ones with awkward answers.
Residency
Stored and processed in Australia
Onshore, end to end
Recordings, transcripts and derived analysis are stored and processed in Australia for their whole life — not just at rest, and not just in transit.
No third-party AI providers
Call content is never sent to OpenAI, Google or Anthropic. The speech and language models run in Australia, under our control.
Nothing crosses a border
Because there is no external AI API in the path, there is no cross-border disclosure to assess under Australian Privacy Principle 8.
This is worth being precise about, because most call-analytics products are a friendly interface over a US AI API. If your provider cannot tell you which company's servers processed a given call, the honest answer is that it left the country.
Redaction
What is removed, and what is not
Being exact here matters more than sounding impressive.
| Transcript | Original recording | |
|---|---|---|
| Card numbers | Redacted | Unchanged |
| Dates of birth | Redacted | Unchanged |
| Licence numbers | Redacted | Unchanged |
Stated plainly: if a customer reads a card number aloud, that audio still exists in the recording — exactly as it does in your phone system today. WiseSentry does not modify your recordings. We would rather you heard that from us than found it in a penetration test.
This is why recording links in alerts expire, and why access is logged. See below.
Access
Who can see what
- Per-department access. A user is granted specific departments of their own organisation — one, several, or all of them.
- Default deny. An account with no grant sees nothing, not everything.
- No cross-client access, ever. Isolation is enforced in the database query on every read, not by convention or by a shared key.
- Authenticated sign-in in front of the dashboard, with no password for your staff to choose badly.
- Access logging. Who opened which call, and when.
Compliance
Australian obligations
Privacy Act 1988 & the APPs
Call recordings containing personal information are covered. WiseSentry is a processor of data you already hold — it does not introduce a new collection.
APP 8 — cross-border disclosure
Not engaged by WiseSentry's processing, because no call content leaves Australia. Your own recording retention remains your obligation.
You must still tell callers
Recording calls requires notification, and that duty is yours, not ours. WiseSentry reviews recordings you are already lawfully making.
New Zealand
For NZ operations, the Privacy Act 2020 and IPP 12 apply to the same questions. Ask us how a trans-Tasman deployment is structured.
This page is a plain-English summary, not legal advice. Your obligations depend on your industry and your own recording practices.
Send us your security questionnaire
We would rather answer it properly up front than discover a blocker after a pilot.